Privacy Policy – www999 Pakistan Online Gaming Platform

www999 is an online gaming platform operating at www999.run, serving players across Pakistan with PKR-denominated sports betting, casino games, crash games, jackpot slots, and related entertainment products. When we refer to "www999", "we", "us", or "our" in this policy, we mean the operator of the www999 brand and platform.

This Privacy Policy explains in plain, honest language how www999 handles the personal information of players, website visitors, and anyone else who interacts with our platform. We know that Pakistani users are increasingly aware of data privacy — and rightly so. This policy is written to give you a complete, transparent picture of what happens to your data, not to obscure it in legal language.

This policy works alongside the Terms and Conditions and Responsible Gaming Policy. Where there is any overlap or conflict, this Privacy Policy governs data matters specifically.

www999 collects different types of data depending on how you interact with the platform. Below is an honest breakdown of every category of data we may hold about you:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification specifically requires a document photograph as part of the Know Your Customer (KYC) process.

www999 collects data through several distinct channels. Understanding these helps you know what information flows from each type of interaction with the platform:

• Direct submission: When you register an account, you provide identity, contact, and date-of-birth data directly. When you submit KYC documents, identity data is collected. When you contact support, communication data is collected.
• Transactional data: Every deposit and withdrawal generates financial and transaction data. This is necessary for processing payments and maintaining accurate account records.
• Platform usage: As you navigate www999 — browsing games, placing bets, using the Aviator interface — usage and gaming data is generated automatically. This data is used to operate the platform and to personalise your experience.
• Automated technologies: Cookies, session tokens, and similar technologies collect technical and usage data. See Section 9 for full details on cookie usage.
• Third-party sources: In limited circumstances, www999 may receive data from third parties — for example, identity verification is cross-referenced with government databases to confirm CNIC validity, and payment processors may confirm transaction status.

www999 uses personal data only for legitimate purposes that are directly related to operating the platform and serving Pakistani players. We do not use data in ways that are not described here. Below is every purpose for which your data is used:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and provide you with access to the platform.
• Payment processing: To process deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments; to process withdrawal requests; to maintain accurate financial records for your account.
• Game operation: To enable you to place bets, play casino games, access the Aviator crash game, participate in PSL betting markets, and use all other features of www999.
• Fraud prevention and security: To detect and prevent fraudulent activity, multiple account creation, money laundering, bonus abuse, and any other prohibited conduct listed in the Terms and Conditions.
• Regulatory compliance: To comply with Know Your Customer (KYC) requirements, Anti-Money Laundering (AML) obligations, and any other legal or regulatory requirements applicable to www999's operation.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply self-exclusion and deposit limit tools accurately, and to fulfil our obligations as a responsible operator.
• Customer support: To respond to your queries, investigate complaints, resolve disputes, and provide assistance with account or payment issues.
• Platform improvement: To analyse how players use www999 in order to improve features, game selection, payment flow, and overall user experience. This analysis is conducted on aggregated, anonymised data wherever possible.
• Marketing communications: To send you promotions, bonus offers, PSL season updates, and other news about www999 — but only if you have opted in to receive these communications. You can opt out at any time.

Every time www999 processes your personal data, we do so on one of the following lawful bases. This section explains which basis applies to which processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account management, payment processing, and game operation. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable laws — including KYC identity verification, AML transaction monitoring, and record-keeping required by financial regulations.
• Legitimate interests: Processing that serves the legitimate interests of www999 and our player community, where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and platform improvement analytics.
• Consent: Processing based on your explicit, freely given consent — specifically marketing communications by email and SMS. You can withdraw this consent at any time without affecting the lawfulness of processing before withdrawal.

www999 takes a minimal-sharing approach to your personal data. We share data only when it is necessary for the reasons described in this policy. Below is a complete list of the categories of recipients with whom data may be shared:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, and partner banks receive transaction data necessary to process your deposits and withdrawals. These providers receive only the data required for the transaction — no gaming history, no surplus personal data.
• Identity verification providers: Third-party KYC service providers may receive your identity documents and personal details to cross-verify them against official databases. These providers are contractually bound to use this data only for the verification purpose.
• Game providers: Game software providers (such as Spribe for Aviator) may receive a pseudonymised player ID to enable game session management. These providers do not receive your name, contact details, or payment information.
• Technology service providers: Hosting, cloud infrastructure, and security service providers who maintain the www999 platform may have access to data stored on the systems they operate. They are contractually bound by strict data processing agreements.
• Law enforcement and regulators: www999 will share data with law enforcement agencies, financial intelligence authorities, or regulators when required to do so by law, or when we have a good-faith belief that disclosure is necessary to prevent crime or protect the safety of our players or the public.

www999 will never sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This applies to all data — browsing history, gaming data, contact information, and financial data.

Data security is not something www999 treats lightly. Pakistani players entrust us with sensitive financial and personal information, and we take the corresponding responsibility seriously. The security measures in place for www999 include:

• TLS/SSL encryption: All data transmitted between your device and www999's servers is encrypted using TLS (Transport Layer Security), the same technology used by banks and financial institutions.
• Encrypted data storage: Sensitive data including financial account details and identity documents is stored in encrypted form at rest. Encryption keys are managed separately from the data they protect.
• Access controls: Internally, player data is accessible only to staff members who require it for their specific role. Access is logged and regularly audited.
• Two-factor authentication: Available on all player accounts and enforced for administrative access to data systems.
• Regular security auditing: The www999 platform and its infrastructure undergo regular security assessments to identify and address vulnerabilities before they can be exploited.
• Incident response: www999 maintains a documented data breach response procedure. In the event of a breach affecting player data, affected players will be notified promptly with information about what happened and what steps to take.

www999 retains personal data for as long as is necessary for the purposes described in this policy, and for as long as required by applicable legal and regulatory obligations. The general retention periods are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years after account closure. This covers identity, financial, gaming, and communications data.
• Transaction records: Financial transaction records are retained for a minimum of seven years to satisfy financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for the duration of the account relationship and for five years post-closure.
• Support communications: Customer support chat logs and email correspondence are retained for three years after the relevant issue is resolved.
• Technical and usage data: Anonymised usage analytics are retained indefinitely in aggregated form. Individual session logs are retained for twelve months.
• Self-excluded players: Data for permanently self-excluded players is retained to prevent re-registration for the duration of the exclusion period, and for five years thereafter.

When data is no longer required and retention obligations have been met, www999 will securely delete or anonymise the data so that it can no longer identify you.

www999 uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. A cookie is a small text file that is stored in your browser when you visit www999. Here is what each type of cookie does:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your preferences during a session, and prevent security issues. These cannot be disabled without breaking the site.
• Performance cookies: These collect anonymised data about how players use www999 — which pages are visited, how long sessions last, where errors occur. This helps us improve the platform. No personally identifiable information is collected in this category.
• Functional cookies: These remember your settings — such as preferred language and deposit method — so you do not have to re-enter them every visit.
• Security cookies: These support fraud detection and session security, including detection of multiple simultaneous logins from different locations.

www999 does not use third-party advertising cookies or tracking pixels for retargeted advertising. You will not see www999 ads following you around the internet as a result of visiting our platform.

You can manage cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use www999 — you may not be able to log in or maintain a session. Disabling other categories of cookies will not affect platform access but may reduce functionality.

As a www999 player, you have meaningful rights over your personal data. These are not bureaucratic formalities — they are real rights that www999 is committed to honouring promptly and completely.

To exercise any of these rights, contact us at support@www999.run with the subject line "Data Rights Request". We will verify your identity before processing the request and respond within 30 days. If we need additional time, we will notify you.

www999 is strictly for adults aged 18 and over. We do not knowingly collect, process, or store personal data of individuals under the age of 18. Registration on www999 requires confirmation that the user is at least 18 years old, and identity verification processes are designed to detect underage users.

If www999 becomes aware that a player is under 18, the account will be closed immediately, all data collected will be scheduled for deletion (subject to the retention obligations that may apply due to the breach), and any funds in the account will be handled in accordance with the Terms and Conditions.

If you believe that a minor may have registered on www999 or that their data may have been collected by the platform, please contact us immediately at support@www999.run so that we can investigate and act without delay.

www999 sends marketing communications — including promotional offers, bonus announcements, PSL season updates, and platform news — only to players who have explicitly opted in to receive them. Marketing opt-in is requested during the registration process and can be managed at any time through your account settings.

If you have opted in to marketing from www999, you may receive:

• Email communications about new games, promotions, and platform updates.
• SMS messages about time-sensitive offers and PSL/cricket betting promotions.
• In-platform notifications when you are logged in to www999.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email from www999.
• Updating your notification preferences in the www999 account settings page.
• Contacting support at support@www999.run and requesting removal from all marketing lists.

Opting out of marketing will not affect your ability to use www999 or your access to your account in any way. You will still receive transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — as these are not marketing and cannot be opted out of while your account is active.

www999 reviews this Privacy Policy regularly and will update it when there are changes to how we collect, use, or protect data, or when legal or regulatory requirements necessitate updates. When material changes are made, we will notify registered players by email before the new policy takes effect, and we will display a notice on the www999 platform.

The "Last Updated" date at the top of this policy shows when it was most recently revised. We recommend checking this page periodically so you are always aware of the current version. The version number (currently 3.1) changes with every material update.

Your continued use of www999 after a policy update constitutes acceptance of the revised policy. If you do not agree with changes to the Privacy Policy, you should close your account and contact support to arrange return of any available balance.

If you have questions about this Privacy Policy, want to exercise your data rights, or want to raise a concern about how www999 has handled your personal data, please use the following channels:

• Email: support@www999.run — use the subject line "Privacy Enquiry" or "Data Rights Request" so your message is routed to the right team.
• Live Chat: Available 24/7 in your www999 account dashboard, in English and Urdu.

www999 aims to respond to all privacy-related enquiries within 10 working days. Formal data rights requests (access, erasure, portability, etc.) are processed within 30 days from the date we verify your identity.

If you are not satisfied with how www999 has handled a privacy matter after raising it with us directly, you have the right to escalate your complaint to the appropriate data protection authority. We will cooperate fully with any such investigation.